Is "Helmet" on JetBrains Marketplace Safe to Install?

SANDIP CHITALE · jetbrains · v1.0.33

How it works? NOTE: This plugin requires that you have your KUBECONFIG file configured correctly to connect to your Kubernetes cluster, and your can access the Helm...

Risk Assessment

Analyzed
84.98
out of 100
HIGH

290 security findings detected across all analyzers

JetBrains plugin analyzed via plugin.xml configuration and static code analysis

Severity Breakdown

0
Critical
0
High
189
Medium
63
Low
0
Info

Finding Categories

189
IoC Indicators

YARA Rules Matched

8 rules(63 hits)
PM Zip with js postinstall network communication postinstall system command postinstall obfuscation postinstall file download postinstall crypto operations postinstall file manipulation postinstall persistence mechanism

About This Extension

How it works? NOTE: This plugin requires that you have your KUBECONFIG file configured correctly to connect to your Kubernetes cluster, and your can access the Helm...

Detailed Findings

101 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

Domains
189
Strings
189

All Indicators · 189

Domain
detected Domain: 0.cl

XIOC detected Domain: 0.cl

extracted_from_files

Domain
detected Domain: b.lv

XIOC detected Domain: b.lv

extracted_from_files

Domain
detected Domain: z.gp

XIOC detected Domain: z.gp

extracted_from_files

Domain
detected Domain: m.cr

XIOC detected Domain: m.cr

extracted_from_files

Domain
detected Domain: y.sx

XIOC detected Domain: y.sx

extracted_from_files

Domain
detected Domain: 5.kg

XIOC detected Domain: 5.kg

extracted_from_files

Domain
detected Domain: w.bn

XIOC detected Domain: w.bn

extracted_from_files

Domain
detected Domain: f.nr

XIOC detected Domain: f.nr

extracted_from_files

Domain
detected Domain: n.om

XIOC detected Domain: n.om

extracted_from_files

Domain
detected Domain: pom.properties

XIOC detected Domain: pom.properties

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: ù.pg

XIOC detected Domain: ù.pg

extracted_from_files

Domain
detected Domain: k.mm

XIOC detected Domain: k.mm

extracted_from_files

Domain
detected Domain: qg.gh

XIOC detected Domain: qg.gh

extracted_from_files

Domain
detected Domain: ٩.as

XIOC detected Domain: ٩.as

extracted_from_files

Domain
detected Domain: n.gq

XIOC detected Domain: n.gq

extracted_from_files

Domain
detected Domain: o.jcb

XIOC detected Domain: o.jcb

extracted_from_files

Domain
detected Domain: 3ÿ.sc

XIOC detected Domain: 3ÿ.sc

extracted_from_files

Domain
detected Domain: e.ma

XIOC detected Domain: e.ma

extracted_from_files

Domain
detected Domain: 1.bb

XIOC detected Domain: 1.bb

extracted_from_files

Domain
detected Domain: 2.kp

XIOC detected Domain: 2.kp

extracted_from_files

Domain
detected Domain: 9.uk

XIOC detected Domain: 9.uk

extracted_from_files

Domain
detected Domain: pom.propertiessv.jm

XIOC detected Domain: pom.propertiessv.jm

extracted_from_files

Domain
detected Domain: tbv.tl

XIOC detected Domain: tbv.tl

extracted_from_files

Domain
detected Domain: j.ki

XIOC detected Domain: j.ki

extracted_from_files

Domain
detected Domain: s.sc

XIOC detected Domain: s.sc

extracted_from_files

Domain
detected Domain: 1.sl

XIOC detected Domain: 1.sl

extracted_from_files

Domain
detected Domain: c.bt

XIOC detected Domain: c.bt

extracted_from_files

Domain
detected Domain: h.aq

XIOC detected Domain: h.aq

extracted_from_files

Domain
detected Domain: j.us

XIOC detected Domain: j.us

extracted_from_files

Domain
detected Domain: qds.bd

XIOC detected Domain: qds.bd

extracted_from_files

Domain
detected Domain: 5frm.ie

XIOC detected Domain: 5frm.ie

extracted_from_files

Domain
detected Domain: n.sg

XIOC detected Domain: n.sg

extracted_from_files

Domain
detected Domain: z.pe

XIOC detected Domain: z.pe

extracted_from_files

Domain
detected Domain: cֆ.np

XIOC detected Domain: cֆ.np

extracted_from_files

Domain
detected Domain: v.is

XIOC detected Domain: v.is

extracted_from_files

Domain
detected Domain: dym.tj

XIOC detected Domain: dym.tj

extracted_from_files

Domain
detected Domain: 1.mk

XIOC detected Domain: 1.mk

extracted_from_files

Domain
detected Domain: i.aw

XIOC detected Domain: i.aw

extracted_from_files

Domain
detected Domain: dg.kn

XIOC detected Domain: dg.kn

extracted_from_files

Domain
detected Domain: 7.jo

XIOC detected Domain: 7.jo

extracted_from_files

Domain
detected Domain: f.mc

XIOC detected Domain: f.mc

extracted_from_files

Domain
detected Domain: z.bi

XIOC detected Domain: z.bi

extracted_from_files

Domain
detected Domain: z.ai

XIOC detected Domain: z.ai

extracted_from_files

Domain
detected Domain: 3p.be

XIOC detected Domain: 3p.be

extracted_from_files

Domain
detected Domain: kpdq.kg

XIOC detected Domain: kpdq.kg

extracted_from_files

Domain
detected Domain: z.gl

XIOC detected Domain: z.gl

extracted_from_files

Domain
detected Domain: s.dm

XIOC detected Domain: s.dm

extracted_from_files

Domain
detected Domain: v.gh

XIOC detected Domain: v.gh

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: u4.mg

XIOC detected Domain: u4.mg

extracted_from_files

Domain
detected Domain: z.la

XIOC detected Domain: z.la

extracted_from_files

Domain
detected Domain: j.kz

XIOC detected Domain: j.kz

extracted_from_files

Domain
detected Domain: w.hk

XIOC detected Domain: w.hk

extracted_from_files

Domain
detected Domain: z.gq

XIOC detected Domain: z.gq

extracted_from_files

Domain
detected Domain: j.ml

XIOC detected Domain: j.ml

extracted_from_files

Domain
detected Domain: 3.pg

XIOC detected Domain: 3.pg

extracted_from_files

Domain
detected Domain: 6.af

XIOC detected Domain: 6.af

extracted_from_files

Domain
detected Domain: d.gu

XIOC detected Domain: d.gu

extracted_from_files

Domain
detected Domain: u.lc

XIOC detected Domain: u.lc

extracted_from_files

Domain
detected Domain: r9c.ky

XIOC detected Domain: r9c.ky

extracted_from_files

Domain
detected Domain: ҿg.ht

XIOC detected Domain: ҿg.ht

extracted_from_files

Domain
detected Domain: il.cy

XIOC detected Domain: il.cy

extracted_from_files

Domain
detected Domain: be.rw

XIOC detected Domain: be.rw

extracted_from_files

Domain
detected Domain: li.aq

XIOC detected Domain: li.aq

extracted_from_files

Domain
detected Domain: k.gq

XIOC detected Domain: k.gq

extracted_from_files

Domain
detected Domain: wd.mm

XIOC detected Domain: wd.mm

extracted_from_files

Domain
detected Domain: z.gh

XIOC detected Domain: z.gh

extracted_from_files

Domain
detected Domain: ۅ.aw

XIOC detected Domain: ۅ.aw

extracted_from_files

Domain
detected Domain: d.de

XIOC detected Domain: d.de

extracted_from_files

Domain
detected Domain: mz.eu

XIOC detected Domain: mz.eu

extracted_from_files

Domain
detected Domain: ya.na

XIOC detected Domain: ya.na

extracted_from_files

Domain
detected Domain: v5z.gd

XIOC detected Domain: v5z.gd

extracted_from_files

Domain
detected Domain: gi.cd

XIOC detected Domain: gi.cd

extracted_from_files

Domain
detected Domain: h.mh

XIOC detected Domain: h.mh

extracted_from_files

Domain
detected Domain: 0.cd

XIOC detected Domain: 0.cd

extracted_from_files

Domain
detected Domain: e.bh

XIOC detected Domain: e.bh

extracted_from_files

Domain
detected Domain: ꁠ.cr

XIOC detected Domain: ꁠ.cr

extracted_from_files

Domain
detected Domain: i.na

XIOC detected Domain: i.na

extracted_from_files

Domain
detected Domain: k.bd

XIOC detected Domain: k.bd

extracted_from_files

Domain
detected Domain: a.be

XIOC detected Domain: a.be

extracted_from_files

Domain
detected Domain: 6.bf

XIOC detected Domain: 6.bf

extracted_from_files

Domain
detected Domain: r7.sc

XIOC detected Domain: r7.sc

extracted_from_files

Domain
detected Domain: qõ.lr

XIOC detected Domain: qõ.lr

extracted_from_files

Domain
detected Domain: j.gt

XIOC detected Domain: j.gt

extracted_from_files

Domain
detected Domain: me.tj

XIOC detected Domain: me.tj

extracted_from_files

Domain
detected Domain: v.gw

XIOC detected Domain: v.gw

extracted_from_files

Domain
detected Domain: c.lv

XIOC detected Domain: c.lv

extracted_from_files

Domain
detected Domain: p.bh

XIOC detected Domain: p.bh

extracted_from_files

Domain
detected Domain: f.ci

XIOC detected Domain: f.ci

extracted_from_files

Domain
detected Domain: b.sz

XIOC detected Domain: b.sz

extracted_from_files

Domain
detected Domain: s.wf

XIOC detected Domain: s.wf

extracted_from_files

Domain
detected Domain: 6.mo

XIOC detected Domain: 6.mo

extracted_from_files

Domain
detected Domain: wu.ee

XIOC detected Domain: wu.ee

extracted_from_files

Domain
detected Domain: n.gm

XIOC detected Domain: n.gm

extracted_from_files

Domain
detected Domain: z.vi

XIOC detected Domain: z.vi

extracted_from_files

Domain
detected Domain: ц.sv

XIOC detected Domain: ц.sv

extracted_from_files

Domain
detected Domain: r.il

XIOC detected Domain: r.il

extracted_from_files

Domain
detected Domain: vџ.cl

XIOC detected Domain: vџ.cl

extracted_from_files

Domain
detected Domain: 碍.sk

XIOC detected Domain: 碍.sk

extracted_from_files

Domain
detected Domain: r.ch

XIOC detected Domain: r.ch

extracted_from_files

Domain
detected Domain: 2.sd

XIOC detected Domain: 2.sd

extracted_from_files

Domain
detected Domain: fq.aw

XIOC detected Domain: fq.aw

extracted_from_files

Domain
detected Domain: 9.mq

XIOC detected Domain: 9.mq

extracted_from_files

Domain
detected Domain: u.km

XIOC detected Domain: u.km

extracted_from_files

Domain
detected Domain: o.gi

XIOC detected Domain: o.gi

extracted_from_files

Domain
detected Domain: hej.ug

XIOC detected Domain: hej.ug

extracted_from_files

Domain
detected Domain: ds.cn

XIOC detected Domain: ds.cn

extracted_from_files

Domain
detected Domain: q.tn

XIOC detected Domain: q.tn

extracted_from_files

Domain
detected Domain: r.al

XIOC detected Domain: r.al

extracted_from_files

Domain
detected Domain: wt.ml

XIOC detected Domain: wt.ml

extracted_from_files

Domain
detected Domain: j.uz

XIOC detected Domain: j.uz

extracted_from_files

Domain
detected Domain: 2.bg

XIOC detected Domain: 2.bg

extracted_from_files

Domain
detected Domain: g.nf

XIOC detected Domain: g.nf

extracted_from_files

Domain
detected Domain: q.sd

XIOC detected Domain: q.sd

extracted_from_files

Domain
detected Domain: k.tn

XIOC detected Domain: k.tn

extracted_from_files

Domain
detected Domain: x.mk

XIOC detected Domain: x.mk

extracted_from_files

Domain
detected Domain: u.gh

XIOC detected Domain: u.gh

extracted_from_files

Domain
detected Domain: xvї.th

XIOC detected Domain: xvї.th

extracted_from_files

Domain
detected Domain: μ.sv

XIOC detected Domain: μ.sv

extracted_from_files

Domain
detected Domain: uf.pe

XIOC detected Domain: uf.pe

extracted_from_files

Domain
detected Domain: j.ve

XIOC detected Domain: j.ve

extracted_from_files

Domain
detected Domain: 7.az

XIOC detected Domain: 7.az

extracted_from_files

Domain
detected Domain: 5eϋ.ke

XIOC detected Domain: 5eϋ.ke

extracted_from_files

Domain
detected Domain: g.om

XIOC detected Domain: g.om

extracted_from_files

Domain
detected Domain: پ.ci

XIOC detected Domain: پ.ci

extracted_from_files

Domain
detected Domain: ϣz.kp

XIOC detected Domain: ϣz.kp

extracted_from_files

Domain
detected Domain: p.by

XIOC detected Domain: p.by

extracted_from_files

Domain
detected Domain: l.mc

XIOC detected Domain: l.mc

extracted_from_files

Domain
detected Domain: 9k.ms

XIOC detected Domain: 9k.ms

extracted_from_files

Domain
detected Domain: ӽ.so

XIOC detected Domain: ӽ.so

extracted_from_files

Domain
detected Domain: r.bi

XIOC detected Domain: r.bi

extracted_from_files

Domain
detected Domain: nd.is

XIOC detected Domain: nd.is

extracted_from_files

Domain
detected Domain: f.tf

XIOC detected Domain: f.tf

extracted_from_files

Domain
detected Domain: ѧe.sx

XIOC detected Domain: ѧe.sx

extracted_from_files

Domain
detected Domain: f.ph

XIOC detected Domain: f.ph

extracted_from_files

Domain
detected Domain: r.ml

XIOC detected Domain: r.ml

extracted_from_files

Domain
detected Domain: f.me

XIOC detected Domain: f.me

extracted_from_files

Domain
detected Domain: zt.gi

XIOC detected Domain: zt.gi

extracted_from_files

Domain
detected Domain: 5s.at

XIOC detected Domain: 5s.at

extracted_from_files

Domain
detected Domain: a.lv

XIOC detected Domain: a.lv

extracted_from_files

Domain
detected Domain: g.kh

XIOC detected Domain: g.kh

extracted_from_files

Domain
detected Domain: v.kp

XIOC detected Domain: v.kp

extracted_from_files

Domain
detected Domain: q.pe

XIOC detected Domain: q.pe

extracted_from_files

Domain
detected Domain: j.im

XIOC detected Domain: j.im

extracted_from_files

Domain
detected Domain: j.cm

XIOC detected Domain: j.cm

extracted_from_files

Domain
detected Domain: c1.ml

XIOC detected Domain: c1.ml

extracted_from_files

Domain
detected Domain: 6c.cx

XIOC detected Domain: 6c.cx

extracted_from_files

Domain
detected Domain: o.ni

XIOC detected Domain: o.ni

extracted_from_files

Domain
detected Domain: a.ml

XIOC detected Domain: a.ml

extracted_from_files

Domain
detected Domain: w.bz

XIOC detected Domain: w.bz

extracted_from_files

Domain
detected Domain: 5c.et

XIOC detected Domain: 5c.et

extracted_from_files

Domain
detected Domain: di.re

XIOC detected Domain: di.re

extracted_from_files

Domain
detected Domain: h.in

XIOC detected Domain: h.in

extracted_from_files

Domain
detected Domain: d7i1.nz

XIOC detected Domain: d7i1.nz

extracted_from_files

Domain
detected Domain: 8.hk

XIOC detected Domain: 8.hk

extracted_from_files

Domain
detected Domain: y.sb

XIOC detected Domain: y.sb

extracted_from_files

Domain
detected Domain: g.mp

XIOC detected Domain: g.mp

extracted_from_files

Domain
detected Domain: f.ps

XIOC detected Domain: f.ps

extracted_from_files

Domain
detected Domain: p.cz

XIOC detected Domain: p.cz

extracted_from_files

Domain
detected Domain: 7u.mo

XIOC detected Domain: 7u.mo

extracted_from_files

Domain
detected Domain: b2.cd

XIOC detected Domain: b2.cd

extracted_from_files

Domain
detected Domain: qx.bs

XIOC detected Domain: qx.bs

extracted_from_files

Domain
detected Domain: c.bw

XIOC detected Domain: c.bw

extracted_from_files

Domain
detected Domain: j.sn

XIOC detected Domain: j.sn

extracted_from_files

Domain
detected Domain: l.si

XIOC detected Domain: l.si

extracted_from_files

Domain
detected Domain: l.cy

XIOC detected Domain: l.cy

extracted_from_files

Domain
detected Domain: 9.cn

XIOC detected Domain: 9.cn

extracted_from_files

Domain
detected Domain: b.ki

XIOC detected Domain: b.ki

extracted_from_files

Domain
detected Domain: l.tn

XIOC detected Domain: l.tn

extracted_from_files

Domain
detected Domain: q.jm

XIOC detected Domain: q.jm

extracted_from_files

Domain
detected Domain: a.cz

XIOC detected Domain: a.cz

extracted_from_files

Domain
detected Domain: j.az

XIOC detected Domain: j.az

extracted_from_files

Domain
detected Domain: mukn.br

XIOC detected Domain: mukn.br

extracted_from_files

Domain
detected Domain: 7c.na

XIOC detected Domain: 7c.na

extracted_from_files

Domain
detected Domain: fj.dk

XIOC detected Domain: fj.dk

extracted_from_files

Domain
detected Domain: n.bw

XIOC detected Domain: n.bw

extracted_from_files

Domain
detected Domain: k.il

XIOC detected Domain: k.il

extracted_from_files

Domain
detected Domain: xр.tc

XIOC detected Domain: xр.tc

extracted_from_files

Domain
detected Domain: y.tk

XIOC detected Domain: y.tk

extracted_from_files

Domain
detected Domain: 3.pk

XIOC detected Domain: 3.pk

extracted_from_files

Domain
detected Domain: v.pk

XIOC detected Domain: v.pk

extracted_from_files

Domain
detected Domain: e.yt

XIOC detected Domain: e.yt

extracted_from_files

Domain
detected Domain: tɀ.mw

XIOC detected Domain: tɀ.mw

extracted_from_files

Domain
detected Domain: 5.sm

XIOC detected Domain: 5.sm

extracted_from_files

Domain
detected Domain: g.fm

XIOC detected Domain: g.fm

extracted_from_files

Domain
detected Domain: p.bn

XIOC detected Domain: p.bn

extracted_from_files

Domain
detected Domain: r.mm

XIOC detected Domain: r.mm

extracted_from_files

Domain
detected Domain: yy.ky

XIOC detected Domain: yy.ky

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Helmet is a jetbrains extension published by SANDIP CHITALE. Version 1.0.33 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.98/100 (HIGH risk) based on 290 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 189 finding(s)
  • Low: 63 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Helmet is published by SANDIP CHITALE on the jetbrains marketplace. The extension has approximately 3K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions